(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote host
is running phpWebThings, a PHP web development framework. This version of
phpWebThings is vulnerable to a SQL Injection flaw. An attacker exploiting this flaw
would send a malformed query to the download.php script. Successful exploitation would
allow the attacker to execute commands on the backend SQL database. This can lead to
loss of confidential materials as well as compromise of the integrity of the SQL database
server.
Solution: No solution is known at this time.
CVE-2005-3676
Moodle < 1.5.3 Multiple Scripts SQL Injection
PVS ID: 3291 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote host
is running Moodle, an open-source content-management system written in PHP. This
version of Moodle is vulnerable to a SQL Injection flaw. An attacker exploiting this flaw
would send a malformed request to one of the affected PHP scripts. Successful exploitation
would result in the attacker executing arbitrary commands against the backend SQL server.
This would lead to a loss of confidential material, possible loss of database integrity, and
possible loss of availability.
Solution: Upgrade to version 1.5.3 or higher.
CVE-2005-3648
Sony XCP-DRM Rootkit Detection
PVS ID: 3292 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running client software that may be considered
questionable.\n\nThe remote host is running the Sony XCP-DRM Rootkit. While not
malicious in nature, the Sony software hides itself on the target host and monitors copying.
Solution: Ensure that this software is compliant with corporate policies and procedures. While some
third party vendors are offering a tool to remove the software, it is recommended that you
contact the vendor for an uninstall tool.
CVE Not available
Xoops < 2.2.4 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3293 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe version of
Xoops installed on the remote host is prone to several vulnerabilities. These include HTML
Injection, SQL Injection, and Directory traversal flaws. An attacker exploiting these flaws
would be able to retrieve confidential data from the remote server, execute arbitrary SQL
commands on the remote database server, and execute malicious code within the browser
Family Internet Services 848